Skip to content
OpenAdvisories

Product · tsparticles

mcp-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-76892

    tsParticles: Malformed JSON requests can terminate the @tsparticles/mcp-server HTTP process

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server calls JSON.parse outside a request-local error boundary in the POST /mcp handler in integrations/mcp-server/src/…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm
  • High 7.5
    CVE-2026-63655

    tsParticles: Unbounded HTTP Request Body Buffering in @tsparticles/mcp-server Leads to Remote DoS

    tsParticles is a TypeScript library for creating highly customizable particle animations. Prior to 4.3.1, the HTTP mode of @tsparticles/mcp-server accepts unauthenticated POST /mcp requests in integrations/mcp-server/src/index.ts and accumulates every request…

    tsparticles tsparticles mcp-server @tsparticles/mcp-server npm